CVE-2026-32478

Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.

Credits

dutafi | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/wedevs-project-manager-business/vulnerability/wordpress-wp-project-manager-pro-plugin-4-0-1-sql-injection-vulnerability?_s_id=cve